Privacy Policy
Last updated: [date of launch]
This page covers the Kashido waitlist at waitlist.kashido.co. It explains what we collect when you join the list, why, and what you can do about it.
Who we are
Kashido (https://kashido.co) is run by Mizuhodo Inc., 1-8-21 Minamiazabu, Minato-ku, Tokyo 106-0047, Japan. Mizuhodo Inc. is the company responsible for your data (the "controller", in European law). For anything in this policy, write to support@kashido.co.
What we collect
The only thing you have to give us to join is your email address. Everything else is optional.
Your email address. You give it to us when you join the list.
Your answers to our questions, if you choose to answer. After you join we ask a few optional questions: where you live, whether you have been to Japan, what brought you here, who the Selection would be for, which Selection you would reserve, which Japanese snack boxes you have tried, and which monthly services you already pay for. You can skip all of them.
Your name and postal address, if you ask for a postcard. We ask for these only if you say you would like one.
How you found us. If you arrive from an advertisement or a link with tracking tags (for example utm_source), we store those tags with your email address so we know which advertisement brought you.
What you do with our emails. Like most newsletters, ours tell us whether an email was opened and which links were clicked.
Technical data. When your browser loads this page, our hosting provider, Cloudflare, sees your IP address. It uses it to deliver the page and to work out which country you are visiting from. We use the country only to decide whether to show you the cookie choice described below. When you join, Klaviyo records your IP address and the approximate location it points to (city and country) with your sign-up, as a record of when and how you joined. We keep no other logs of IP addresses.
Cookies and similar tools. We use the Meta Pixel and Google Analytics 4. In Europe they load only if you accept them. They set cookies and record that you visited the page, whether you joined the list, and general information about your device and browser. See "Cookies and advertising tools" below.
Why we use it
- To send you what we promised when you joined: the first stories from the prefectures, a note when we open, and occasional news about Kashido before then.
- To send your postcard. We use your name and postal address for the postcard and for nothing else.
- To plan the Selections and our launch. We look at the survey answers, mostly in aggregate, to understand who is on the list.
- To measure our advertising and show it to the right people. The Meta Pixel tells us which advertisements led people to join, and lets Meta show our advertisements to people who have visited this page or who resemble those who joined. Google Analytics tells us how the page is used. We rely on your consent where the law requires it (visitors in the European Economic Area, the United Kingdom and Switzerland) and otherwise on our legitimate interest in knowing whether our advertising works.
For the first three we rely on your consent, which you give by joining, by asking for a postcard, or by answering. You can withdraw it at any time.
Nothing is decided about you automatically.
Who handles your data
We do not sell or rent your email address or postal address, and we do not give them to other companies for their own use.
These companies handle data for us, on our instructions:
- Klaviyo, Inc. (United States): stores the list and sends our emails.
- Cloudflare, Inc. (United States): hosts this page.
- Google (Google Analytics 4): counts visits to this page and what people do on it.
Japan Post and the postal service in your country carry the postcard, which shows your name and address. The few people on our team who write and post the cards, some of them volunteers, see them too.
Meta is different. When the Meta Pixel loads, Meta receives cookie and device data about your visit. It uses that data to tell us how our advertisements perform and to decide who sees them, and it also uses it for its own purposes under its own privacy policy (https://www.facebook.com/privacy/policy). If you are in the European Economic Area or the United Kingdom, we and Meta Platforms Ireland Ltd are jointly responsible for collecting that data and sending it to Meta. What Meta does with it afterwards is Meta’s responsibility, and you can use your rights over it directly with Meta.
Neither Meta nor Google receives your email address or postal address from us.
Cookies and advertising tools
If you visit from the European Economic Area, the United Kingdom or Switzerland, the Meta Pixel and Google Analytics load only after you choose "Accept". If you choose "Decline", they do not load, and the page works the same. You can change your choice at any time through the "Cookie settings" link in the footer of this page.
If you visit from elsewhere, these tools load when you open the page. You can block them in your browser settings, and you can control how Meta and Google use data for advertising in your Meta and Google account settings.
Google Analytics cookies (_ga) last up to two years; the Meta cookie (_fbp) lasts 90 days. The page itself does not need cookies to work.
Where your data goes
We are based in Japan, and the companies listed above are based mainly in the United States, so your data leaves your country. The European Commission and the UK government have both recognized Japan’s privacy law as giving adequate protection. Switzerland has no such decision for Japan; if you join from Switzerland, you are sending your details directly to us in Japan, and we protect them as this policy describes. For the United States, we rely on our providers' certification under the Data Privacy Framework (its EU, UK and Swiss versions) and, as a fallback, on standard contractual clauses in our contracts with them.
How long we keep it
- Email address and survey answers: until you leave the list. Every email we send has an unsubscribe link, and you can also write to us. After you unsubscribe we keep your email address on a do-not-email list, so we don’t write to you again by mistake; ask us and we will delete it entirely. When Kashido opens, the list becomes part of Kashido’s main mailing list and the privacy policy at kashido.co applies; we will tell you when that happens. If Kashido has not opened within 24 months of your joining, we delete the list.
- Name and postal address for the postcard: we delete them once the postcard has been posted, and in any case within 12 months of receiving them.
- Analytics data: Google Analytics keeps visit-level data for 14 months; after that only totals remain. Meta keeps what it receives under its own policy.
Your rights
Wherever you live, you can ask us to show you the data we hold about you, to correct it, or to delete it, and you can leave the list at any time. Write to support@kashido.co and we will answer within 30 days.
If you are in the European Economic Area, the United Kingdom or Switzerland, you also have the right to restrict or object to our use of your data, to receive your data in a portable form, to withdraw consent at any time, and to complain to your local data protection authority.
If you are in California: we do not sell your personal information. The Meta Pixel does pass data about your visit to Meta for advertising, which California law calls "sharing"; you can switch it off as described in "Cookies and advertising tools". This page does not respond to browser "Do Not Track" signals.
Children
The list is for adults. If you are under 16, please don’t join. If we learn that someone under 16 has, we delete their details.
Changes
If we change this policy in a way that matters, we will email the list before the change takes effect. The date at the top shows the latest version.